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What is claimed is: 



1. 



A storage apparatus, comprising: 



2 



a processor; 



3 



a memory; 



4 



at least one of a plurality of storage devices; 

a storage controller, coupled with the at least one of a plurality of storage 



5 




1 2 correspondence between at least one of a plurality of segments of a virtual local area 

1 3 network (VLAN) connectable by the network interface and at least one of a plurality of 

1 4 virtual volumes of the at least one of a plurality of storage devices; and 



16 interface are operable to control a virtual local area network (VLAN) switch to map the at 

1 7 least one of a plurality of segments of a virtual local area network (VLAN) connectable 

18 by the network interface to the at least one of a plurality of virtual volumes of the at least 

1 9 one of a plurality of storage devices based upon the configuration information. 

1 2. The apparatus of claim 1, 

2 further comprising an out of band management interface connectable to a 

3 second network. 

1 3. The apparatus of claim 1, 

2 wherein the network interface connectable to a virtual local area network 

3 (VLAN) switch comprises an interface to a VLAN trunk line. 

1 4. The apparatus of claim 3, 

2 wherein information carried by the VLAN trunk line is identified using an 

3 embedded tag. 
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wherein the processor, the memory, the storage controller and the network 



1 



5. The apparatus of claim 1, 
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2 wherein the network interface connectable to a virtual local area network 

3 (VLAN) switch comprises an interface to a VLAN switch, the VLAN switch connectible 

4 to at least one of a plurality of host computers via at least one of a plurality of VLAN 

5 access links. 

1 6. The apparatus of claim 5, 

2 wherein information carried by the at least one of a plurality of VLAN 

3 access links comprises untagged frames. 

1 7. The apparatus of claim 6, 

2 wherein information carried by the at least one of a plurality of VLAN 

3 access links is identified using a VLAN Identifier of a receiving port. 

1 8. The apparatus of claim 6, 

2 wherein information carried by the at least one of a plurality of VLAN 

3 access links is identified using a Media Access Control (MAC) address. 

1 9. The apparatus of claim 6, 

2 wherein an untagged frame comprises: 

3 a preamble field; 

4 a source MAC field; 

5 a destination MAC field; 

6 a type field; 

7 a data field; and 

8 a CRC field. 

1 10. A method, comprising: 

2 separating logically a local area network into a plurality of virtual local 

3 area networks, including a first virtual local area network and a second virtual local area 

4 network; 

5 separating logically a storage device into a plurality of virtual volumes, 

6 including a first virtual volume and a second virtual volume; 

7 mapping the first virtual local area network to the first virtual volume and 

8 the second virtual local area network to the second virtual volume to form a 

9 configuration; and 
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10 routing information from the first virtual local area network to the first 

1 1 virtual volume and the second virtual local area network to the second virtual volume 

12 based upon the configuration. 

1 11. The method of claim 1 0, 

2 further comprising at least one of: 

3 configuring network parameters; 

4 configuring a new file system; 

5 configuring a designated file system; and 

6 deleting a designated file system. 

1 12. The method of claim 10, 

2 further comprising at least one of: 

3 updating a management interface IP address; 

4 updating a physical network interface IP address; 

5 updating a VLAN interface IP address and a VLAN tag; 

6 deleting a designated VLAN interface; and 

7 adding a new VLAN interface. 

1 13. The method of claim 10, 

2 further comprising at least one of: 

3 adding a VLAN to a file system; 

4 removing a VLAN from the file system; 

5 adding a volume to the file system; and 

6 removing a volume from the file system. 

1 14. The method of claim 10, 

2 further comprising: 

3 authenticating user authority. 

1 15. A computer program product, comprising: 

2 code for sending and receiving tagged frames to and from a network 

3 interface; 

4 code for managing a file system; 

5 code for managing a virtual volume within the file system; 
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6 code for controlling data transfer between the network interface and a 

7 storage controller of the file system; 

8 code for routing information from a virtual local area network to a virtual 

9 volume in the file system based upon a configuration; and 

1 0 a computer readable storage medium for holding the codes. 

1 16. The computer program product of claim 1 5 , 

2 further comprising at least one of: 

3 code for receiving configuration information for the file system; 

4 code for receiving configuration information for the virtual volume; and 

5 code for receiving configuration information for the virtual local area 

6 network. 

1 17. The computer program product of claim 16, 

2 further comprising at least one of: 

3 code for updating configuration information for the file system; 

4 code for updating configuration information for the virtual volume; and 

5 code for updating configuration information for the virtual local area 

6 network. 

1 18. A computer apparatus, comprising: 

2 a means for processing information; 

3 a means for connecting to a virtual local area network (VLAN) switch; 

4 wherein the means for processing and the means for connecting to a virtual 

5 local area network (VLAN) switch are connectable to an external storage device having at 

6 least one of a plurality of volumes mapped to at least one of a plurality of segments of a 

7 virtual local area network (VLAN) based upon configuration information. 

1 19. A storage apparatus, comprising: 

2 a means for processing information; 

3 a means for storing data; 

4 a means for controlling storing of data; 

5 a means for connecting to a virtual local area network (VLAN) switch; 

6 wherein the means for processing, the means for controlling storing of 

7 information and the means for connecting to a virtual local area network (VLAN) switch 
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8 map at least one of a plurality of segments of a virtual local area network (VLAN) to at 

9 least one of a plurality of virtual volumes of the means for storage data based upon 
10 configuration information. 

1 20. A system, comprising: 

2 a storage device; 

3 a virtual local area network (VLAN) switch, coupled to the storage device; 

4 and 

5 at least one of a plurality of devices coupled to the virtual local area 

6 network (VLAN) switch via at least one of a plurality of virtual local area networks; 

7 wherein the storage device is operable to control the virtual local area 

8 network (VLAN) switch to map at least one of a plurality of segments of at least one of a 

9 plurality of virtual local area networks to at least one of a plurality of virtual volumes of 
1 0 at least one of a plurality of storage devices based upon configuration information. 

1 2 1 . A method of controlling accesses from servers at a disk subsystem, 

2 wherein the disk subsystem is connected to a virtual local area network (VLAN) switch 

3 via a VLAN trunk and receives access requests from the servers via the VLAN switch 

4 and the VLAN trunk, the method comprising the steps of: 

5 allocating storage resource to each VLAN segment, 

6 receiving a Internet Protocol (IP) packet based access from a server, 

7 determining a VLAN segment that the server belongs to, based on a 

8 VLAN identification in the IP packet, and 

9 permitting the server to access the storage resource allocated to the VLAN 
1 0 segment that the server belongs to. 

1 22. A method, comprising: 

2 separating a virtual lan into a plurality of segments; 

3 mapping each one of the plurality of segments to a storage device; and 

4 assigning at least one of a plurality of virtual volumes to each one of the 

5 plurality of segments. 
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